Skip to content
OpenAdvisories
Unscored DTSA-61-1 8 CVEs

php5 - several vulnerabilities

Published Oct 3, 2007 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 php5 5.2.3-1+lenny1

Vulnerabilities 8

  • Unscored —
    CVE-2007-3799 Public exploit

    The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert …

  • Unscored —
    CVE-2007-3806 Public exploit EPSS 11%

    The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arb…

  • Unscored —

    The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, w…

  • Unscored —

    Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to obtain sensitive in…

  • Unscored —

    The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, whi…

  • Unscored —

    The zend_alter_ini_entry function in PHP before 5.2.4 does not properly handle an interruption to the flow of execution…

  • Unscored —

    Unspecified vulnerability in the chunk_split function in PHP before 5.2.4 has unknown impact and attack vectors, relate…

  • Unscored —

    Buffer overflow in the php_openssl_make_REQ function in PHP before 5.2.4 has unknown impact and attack vectors.